dependabot[bot] opened a new pull request, #233: URL: https://github.com/apache/cordova-mobile-spec/pull/233
Bumps [inquirer](https://github.com/SBoudrias/Inquirer.js) from 13.0.1 to 14.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/SBoudrias/Inquirer.js/releases";>inquirer's releases</a>.</em></p> <blockquote> <h2>[email protected]</h2> <p>The umbrella package, bundling <code>@inquirer/prompts</code> and <code>@inquirer/core</code>.</p> <h3>What's new</h3> <ul> <li>Updated to <code>@inquirer/prompts@^8.6.0</code> and <code>@inquirer/core@^12.0.0</code>.</li> <li>Includes the new <code>initialValue</code> option for <code>search</code>, floating-point step fixes for <code>number</code>, and explicit-<code>undefined</code> default handling in <code>number</code>/<code>confirm</code>/<code>editor</code>.</li> </ul> <h3>⚠️ Note on <code>@inquirer/core@12</code></h3> <p><code>[email protected]</code> depends on <code>@inquirer/core@^12.0.0</code>, which changed the <code>useState</code> setter to accept a reducer function <code>(currentValue) => nextValue</code>. This is a type-level change for consumers of the core hook API (relevant if you build custom prompts with <code>@inquirer/core</code>). The built-in prompts are unaffected.</p> <h3>Included</h3> <ul> <li><code>@inquirer/core@^12.0.0</code></li> <li><code>@inquirer/prompts@^8.6.0</code></li> <li><code>@inquirer/type@^4.0.7</code></li> <li><code>@inquirer/ansi@^2.0.7</code></li> </ul> <h2>[email protected]</h2> <ul> <li>Fix security warnings in external-editor</li> </ul> <h2>[email protected]</h2> <ul> <li>Rolled back <code>mute-stream</code> dependency from v4 to v3 to undo breaking compatible <code>engines</code>.</li> <li>Added tooling to prevent regression of the above in the future. This surfaced our min engines already enforced a higher limit, so adjusted the explicit limits to match the current state.</li> </ul> <h2>[email protected]</h2> <ul> <li>Fix (breaking): Inquirer will now throw when encountering non-registered prompt. Prior to this fix, Inquirer would default to <code>type: 'input'</code> in such cases - this behaviour was misleading and made it harder to detect broken code when not using Typescript.</li> <li>Feat: Read env variable <code>INQUIRER_KEYBINDINGS</code> to enable <code>vim</code> or <code>emacs</code> keybindings; making this a user preference instead of a library author preference. One caveat is doing so disable the search feature in the select prompt. Syntax: <code>INQUIRER_KEYBINDINGS=vim,emacs</code>.</li> <li>Fix: Line wraps would sometime cause the cursor to be mispositioned relative to the input.</li> <li>Chore: Dropped the <code>rxjs</code> dependency in favor of a lightweight internal Observable implementation. The package is much smaller for most users now.</li> <li>Chore: Bump dependencies.</li> </ul> <h2>[email protected]</h2> <ul> <li>Fix: Windows rendering bug</li> <li>Fix: Preserve exact literal types in <code>choices</code> array (Typescript only)</li> <li>Fix: Allow input <code>default</code> value to be of type <code>undefined</code> (Typescript only)</li> <li>Bump dependencies</li> </ul> <h2>[email protected]</h2> <ul> <li>Fix: some Windows terminals would freeze and not react to keypresses.</li> </ul> <h2>[email protected]</h2> <ul> <li>Improve <code>expand</code> prompt type inferrence.</li> </ul> <h2>[email protected]</h2> <ul> <li>Feat: Added a loading message while validating editor prompt input.</li> <li>Type improvement: Better type inference with checkbox, search and expand prompts.</li> <li>Fix: <code>editor</code> prompt not always properly handling editor path on windows.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/SBoudrias/Inquirer.js/commit/999706755afbdcae271f62decbd9bcd05560905b";><code>9997067</code></a> fix(release): serialize staging with --concurrency 1</li> <li><a href="https://github.com/SBoudrias/Inquirer.js/commit/2073546b459fd91d71f4f778ddf7b4c5417bb8b5";><code>2073546</code></a> fix(release): disable auto-install hook event in postpack restore</li> <li><a href="https://github.com/SBoudrias/Inquirer.js/commit/7f00eb7c1c3e11e02928f066ab0b39b4ded18628";><code>7f00eb7</code></a> fix(release): bypass auto-install hook in postpack restore</li> <li><a href="https://github.com/SBoudrias/Inquirer.js/commit/5384fa605668ebd141a2d5ff0b370af958fabb46";><code>5384fa6</code></a> chore(release): add workflow_dispatch trigger to publish workflow</li> <li><a href="https://github.com/SBoudrias/Inquirer.js/commit/d11785ffad7ea2008e0b48dd9463391a702715c2";><code>d11785f</code></a> fix(release): warm turbo cache before staging in publish job</li> <li><a href="https://github.com/SBoudrias/Inquirer.js/commit/36d49280f38e9367c3cbe68e325b5128be62b909";><code>36d4928</code></a> chore: Publish new release</li> <li><a href="https://github.com/SBoudrias/Inquirer.js/commit/15dfc545043f4ad81401000bf411a3c75a34eadd";><code>15dfc54</code></a> chore(deps): Bump globby from 16.2.2 to 16.2.3 (<a href="https://redirect.github.com/SBoudrias/Inquirer.js/issues/2234";>#2234</a>)</li> <li><a href="https://github.com/SBoudrias/Inquirer.js/commit/6678f5f0f88b5663343db63b619ae74182c57bcf";><code>6678f5f</code></a> chore(deps-dev): Bump oxfmt in the formatting group (<a href="https://redirect.github.com/SBoudrias/Inquirer.js/issues/2233";>#2233</a>)</li> <li><a href="https://github.com/SBoudrias/Inquirer.js/commit/e57dafaf533a030f1a511cbe95cb90cace4a56b6";><code>e57dafa</code></a> chore: secure release pipeline with npm Trusted Publishing</li> <li><a href="https://github.com/SBoudrias/Inquirer.js/commit/2d677bb2a84e5c38ca0c533e05a0a15b02a42c69";><code>2d677bb</code></a> fix: don't restore package.json in postpack before publish (<a href="https://redirect.github.com/SBoudrias/Inquirer.js/issues/2231";>#2231</a>)</li> <li>Additional commits viewable in <a href="https://github.com/SBoudrias/Inquirer.js/compare/[email protected]@14.1.0";>compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions";>GitHub Actions</a>, a new releaser for inquirer since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
